Anvil

Escalada de privilegios y evaluación de superficie de ataque en tiempo de ejecución para clientes pesados de Windows. Anvil es una herramienta de escalada de privilegios y evaluación de superficie de ataque basada en tiempo de ejecución para aplicaciones cliente pesadas de Windows. En lugar de...

cyber-decoy

cyber-decoy Un señuelo de red contenerizado honeypot que anuncia SSH , RDP y SMB , observa cada conexión entrante con eBPF y redirige mediante proxy inverso cada sesión a un contenedor señuelo aislado. El diseño separa dos aspectos: 1. Observación. Un clasificador eBPF TC adjunto a la interfaz de...

badBANANA-threat-observatory

badBANANA // THREAT OBSERVATORY Inspect exploited vulnerabilities and threat indicators, check their source evidence, and review retained changes. Open the live Observatory · Try the KEV walkthrough · Source coverage · Run it yourself The Observatory brings CISA KEV, ThreatFox, URLhaus, and...

CVE-2026-97687 urllib3: HTTPS proxy TLS configuration may be ignored or overridden

urllib3 is an HTTP client library for Python. From 1.26.0 until 2.8.0, the proxysslcontext, proxyasserthostname, proxyassertfingerprint, sslcontext, certreqs, verifymode, useforwardingforhttps=True, and CERTNONE configuration paths fail to remain separated because target-server TLS settings are...

windows-malware-behavioral-analysis

REMnux & FLARE-VM を使用したマルウェアの挙動分析 隔離されたラボ環境内で、不審なWindows実行ファイルを挙動分析の手法を用いて安全に分析する方法を示す、実践的なブルーチームによるマルウェア調査プロジェクトです。 このプロジェクトは、マルウェアのソースコードをリバースエンジニアリングするのではなく、実行時の挙動の観察、ホストおよびネットワークのテレメトリ収集、侵害インジケータ（IOC）の抽出、そして攻撃者の活動をMITRE ATT&CKフレームワークにマッピングすることに重点を置いています。 目的 安全なマルウェア分析ラボの構築 実行中のマルウェアの挙動の観察...

CVE-2026-101904

Axios is a promise-based HTTP client for the browser and Node.js. From 1.0.0 until 1.20.0, the dispatchRequest function normalizes inherited Object.prototype.headers from a replacement request configuration. A separate same-process prototype-pollution flaw sets Object.prototype.headers, and trust...

CVE-2026-90817

creationtimestamp| type| source ---|---|--- 2026-09-20 13:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvxbywajb42y 2026-09-20 13:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117303608917482607 2026-09-20 13:30:27+00:00| seen|...

CVE-2026-83268

creationtimestamp| type| source ---|---|--- 2026-09-16 01:40:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlyznq5cq2j 2026-09-16 02:12:39+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2ttfl4i24 2026-09-16 16:00:43+00:00| seen|...

CVE-2026-73947

creationtimestamp| type| source ---|---|--- 2026-09-15 22:09:41+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnbeq7ba2p 2026-09-15 22:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlnc22gtx2g 2026-09-22 06:37:07+00:00| seen|...

CVE-2026-73961

creationtimestamp| type| source ---|---|--- 2026-09-15 21:10:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvljwuutr62n 2026-09-15 22:10:42+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnd6qpsp2t 2026-09-23 09:50:25+00:00| seen|...

CVE-2026-19773

creationtimestamp| type| source ---|---|--- 2026-09-15 19:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlda7yvbf2g 2026-09-15 20:08:50+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlgjaxn532p 2026-09-15 20:13:30+00:00| seen|...

Astra Linux – Vulnerability in Firefox

The Performance API did not properly hide the fact that whether a request to a cross-origin resource has observed redirects. This vulnerability affects Firefox versions less than 100...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: nexthop: All fields within the struct nexthopgrp structure must be initialized. The struct nexthopgrp contains two reserved fields that are not initialized by nlaputnhgroup, and these fields contain garbage values. This can ...

CVE-2026-80976

creationtimestamp| type| source ---|---|--- 2026-09-13 12:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfn2uz2so2t 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-89755

creationtimestamp| type| source ---|---|--- 2026-09-13 10:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfdlwqyzd2w 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...

CVE-2026-77091

creationtimestamp| type| source ---|---|--- 2026-09-13 00:07:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvecglaq2z2v...

CVE-2020-37168

creationtimestamp| type| source ---|---|--- 2026-09-12 10:00:05+00:00| seen| https://t.me/shimiscyberworld/1455 2026-09-13 00:00:56+00:00| seen| https://t.me/shimiscyberworld/1455...

CVE-2026-79298

creationtimestamp| type| source ---|---|--- 2026-09-11 16:00:05+00:00| seen| https://t.me/GithubRedTeam/102023 2026-09-12 00:00:36+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102023 2026-09-14 03:00:15+00:00| seen| Telegram/0phjcISM7xaEvPyzzbSiHps9Ynh5NA4Z3XacHD49buP-a4 2026-09-...

CVE-2026-75694

creationtimestamp| type| source ---|---|--- 2026-09-10 21:19:01+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv6y45n7pr2w...

CVE-2026-77109

creationtimestamp| type| source ---|---|--- 2026-09-09 11:49:06+00:00| seen| https://bsky.app/profile/experiencedigest.bsky.social/post/3mv3hs57vsa26 2026-09-12 22:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mve5fnnzil2p...